Forthcast

Privacy Policy

Effective date: April 9, 2026

The canonical version of this privacy policy is maintained at https://forthcast.io/privacy. Please refer to that page for the most up-to-date version.

Introduction

Forthcast ("we," "our," or "us") operates the Forthcast application and website (forthcast.io). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using Forthcast, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Shopify Store Data

When you connect your Shopify store to Forthcast, we access and store:

  • Product information (titles, SKUs, variants, prices)
  • Inventory levels
  • Order history (order dates, quantities, product details)
  • Store information (store name, email)

Account Information

We collect information you provide when creating an account:

  • Email address
  • Store name
  • Shopify access tokens (encrypted)

Usage Data

We automatically collect information about how you use our service, including pages visited, features used, and interaction patterns.

2. How We Use Your Information

We use the collected data for the following purposes:

  • Provide our service: Generate demand forecasts, calculate safety stock, and power all features of Forthcast
  • Improve our algorithms: Enhance forecasting accuracy and feature performance
  • Send notifications: Low stock alerts and important service updates
  • Customer support: Respond to your inquiries and provide assistance
  • Billing: Process subscription payments through Shopify's billing system

3. Data Security

We implement industry-standard security measures to protect your data:

  • All data is transmitted over HTTPS/TLS encryption
  • Shopify access tokens are encrypted at rest
  • Database backups are encrypted
  • Access to production systems is restricted and logged

4. Data Retention

We retain your data as follows:

  • Active accounts: Data is retained while your subscription is active
  • After cancellation: Data is retained for 30 days, then deleted
  • Uninstallation: When you uninstall the app, data is queued for deletion per Shopify's GDPR requirements

5. Data Sharing

We do not sell your data. We may share data with:

  • Service providers: Hosting (cloud infrastructure), email delivery (for alerts), payment processing (via Shopify)
  • Legal requirements: When required by law or to protect our rights

6. Your Rights

You have the right to:

  • Access: Request a copy of your data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data
  • Portability: Request your data in a portable format

To exercise these rights, contact us at info@forthcast.io.

7. GDPR Compliance

Forthcast complies with Shopify's GDPR requirements. We respond to the following Shopify webhooks:

  • customers/data_request: Export customer data upon request
  • customers/redact: Delete customer data upon request
  • shop/redact: Delete all shop data 48 hours after uninstallation

8. Cookies

Forthcast uses essential cookies for authentication and session management. We do not use tracking or advertising cookies. Within the Shopify embedded app, we use Shopify's session token authentication which does not require traditional cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective date."

10. Contact Us

If you have any questions about this Privacy Policy, please contact us: